Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.

Start of repeated scenario.

Your network contains a single Active Directory domain named adatum.com.

The network contains five servers configured as shown in the following table.

All of the servers run Windows Server 2012 R2.

Test_Server has a shared folder named ShareA. Only local users have permissions to ShareA.

The network contains a mainframe computer that is administered by using the Telnet protocol.

The domain contains four client computers configured as shown in the following table.

All of the client computers run the 64-bit version of Windows. User3 frequently accesses ShareA. Remote Desktop is enabled on Computer4.

Your company identifies the following requirements.

Ensure that you can test unsigned device drivers on Computer1.

Enable Credential Guard on Computer2.

Run commands and cmdlets remotely on computer2.

Configure User Account control (UAC) on Computer3 to prompt administrators for credentials when elevated privileges are required.

Ensure that User1 can view and interact with a desktop session of User3.

Ensure that User2 can use Telnet to manage the mainframe.

Ensure that User4 can use Remote Desktop to access Computer4 remotely.

End of repeated scenario.

You need to meet the Credential Guard requirement of Computer2.

Which two Windows features should you install? Each correct answer presents part of the solution.

A.

Windows Process Activation Service (WAS)

B.

Embedded Boot Experience

C.

Isolated User Mode

D.

Windows Identity Foundation 3.5

E.

Hyper-V Hypervisor

Correct Answer: CE

QUESTION 32

Note: This question is part of a series of questions that use the same set of answer choices. Each answer choice may be used once, more than once, or not at all.

You have a computer named Computer1 that has a virtual hard disk (VHD) named Disk1.vhdx.

You plan to configure Computer1 for dual boot from Disk1.vhdx.

You need to install Windows on Disk1.vhdx by using dism.exe.

What should you nm before you install Windows?

A.

Add-WindowsImage

B.

bcdboot.exe

C.

bcdedit.exe

D.

bootcfg.exe

E.

bootim.exe

F.

bootsect.exe

G.

diskpart.exe

H.

Expand-WindowsImage

Correct Answer: G

QUESTION 33

Note: This question is part of a series of questions that use the same set of answer choices. Each answer choice may be used once, more than once, or not at all.

Your network contains a single Active Directory domain. The domain contains a VPN server that supports all of the VPN protocols.

From a computer that runs Windows 10 Pro, a user named User1 creates an SSTP VPN connection to a network named VPN1.

User1 successfully connects to the VPN server. When User1 roams between different Wi- Fi access points, the user loses the connection to the corporate network and must manually re-establish the VPN connection.

You need to ensure that VPN1 automatically maintains the connection while the user roams between Wi-Fi access points.

What should you do?

A.

Click Turn on password protected sharing.

B.

Disable Network Discovery.

C.

Modify the Profile settings of an incoming firewall rule.

D.

Run the Add-VpnConnectionTriggerApplication cmdlet.

E.

Run the New-NetFirewallRule cmdlet and specify the- Direction Outbound parameter.

F.

Run the New-VpnConnection cmdlet.

G.

Run the Set-NetConnectionProfile cmdlet.

H.

Run the Set-VPNConnection cmdlet.

Correct Answer: D

QUESTION 34

You have a computer named Computer1 that runs Windows 10.

You need to register Computer1 with Microsoft Intune.

What should you do?

A.

From Accounts in the Settings app, click enroll in to device management.

B.

From a command prompt, run the djoin command and specify the /psite pararmeter.

C.

From System in Control Panel, modify the domain membership.

D.

From Accounts in the Settings app, add a Microsoft account.

Correct Answer: A

QUESTION 35

You have a computer named Computer1 that runs Windows 10. Computer1 has a printer named Printer1 installed.

You need to configure the settings of Printer1 remotely from another computer.

Which tool should you use on the remote computer?

A.

Device Manager from Control Panel

B.

Print Management from Administrative Tools

C.

Printers & scanners from the Setting app

D.

Devices and Printers from Control Panel

Correct Answer: B

QUESTION 36

You have computers that run Windows 10.

You need to identify both active malware instances and past malware instances from the last three months.

Which command should you run?

A.

Get-EventSubscriber

B.

Get-MpThreatCatalog

C.

Get-WindowsErrorReporting

D.

Get-MpThreatDetection

Correct Answer: D

QUESTION 37

You have a Key Management Service (KMS) host and an administrative workstation named Computer1.

From Computer1, you need to validate the activation status on a computer named Computer2.

What should you run?

A.

Get-RDLicenseConfiguration computer2

B.

slmgr.vbs computcr2 /dlv

C.

winrs.exe -r:Computer2 netdom.exe

D.

ospp.vbs /tokact:computer2

Correct Answer: A

QUESTION 38

You have a computer named Computer1 that is configured to install updates from Windows Server Update Services (WSUS).

Microsoft releases a new Windows update that is not approved in WSUS.

You need to install the update on Computer1.

What should you do?

A.

From a command prompt, run gpupdate /force /sync.

B.

Click Check online for updates from Microsoft Updates, and then check for updates.

C.

Clear the defer upgrades check box, and then check for updates.

D.

From Windows PowerShell, run the Get-WindowsUpdateLog cmdlet, and then run the Update-Module cmdlet.

Correct Answer: A

QUESTION 39

HOTSPOT

You run the Get-Service cmdlet and you receive the following output.

You need to identify what occurs when the status of the services changes. What should you identify?

To answer, select the appropriate options in the answer area.

Correct Answer:

QUESTION 40

Note: This question is part of a series of questions that use the same set of answer choices. Each answer choice may be used once, more than once, or not at all.

Your network contains a single Active Directory domain. The domain contains computers that run Windows 10 Enterprise. The computers are configured as shown in the following table.

When User1 works remotely, the user fails to access shared folders on the corporate network.

When User 2 and User3 work remotely, they successfully connect to the shared folders on the corporate network.

You need to ensure that User1 can connect to the shared folders without user interaction.

What should you do?

A.

Click Turn on password protected sharing.

B.

Disable Network Discovery.

C.

Modify the Profile settings of an incoming firewall rule.

D.

Run the Add-VpnConnectionTriggerApplication cmdlet.

E.

Run the New-NetFirewallRule cmdlet and specify the -Direction Outbound parameter.